Groups | Blog | Home
all groups > dotnet distributed apps > september 2005 >

dotnet distributed apps : .NET Code reverse engineering


lukezhan NO[at]SPAM online.microsoft.com
9/15/2005 12:00:00 AM
Hello,

To against reverse engineering for .NET code, you try a tool "DotFuscator":

http://www.gotdotnet.com/team/dotfuscator/

Hope this help,

Luke
Lelic
9/15/2005 5:07:01 AM
Hi all. I'm fairly new to the .NET platform development, so if my
question is not worded correctly, I apologize. With that said … I have been
tasked to convert a VB6 app to c#. The app has a thick VB client and
communicates via internet with database. At the first glance I was going down
the path of Remoting for communication, but than I have read couple of post
about how easy it is to reverse engineer the .NET code. I’m concerned that
now my Remote server component’s interface and location will be exposed. The
data is highly sensitive, so I’m looking for a suggestion on how to protect
Michael Nemtsev
9/15/2005 11:53:01 AM
Hello Lelic,

L> have been tasked to convert a VB6 app to c#. The app has a thick VB
L> client and communicates via internet with database. At the first
L> glance I was going down the path of Remoting for communication, but

Remoting over what? SOAP, binary? Why did u choose remoting?

L> than I have read couple of post about how easy it is to reverse
L> engineer the .NET code. I'm concerned that now my Remote server
L> component's interface and location will be exposed.
L> The data is highly sensitive, so I'm looking for a suggestion on how to
protect
L> compiled code from reverse engineering. Any suggestions are
L> appreciated.
L>

sure, but nothing is perfect. What kinda info u wanna protect? just code?
mb look at protection of your data, not code?
..net gives u standart CryptoAPI. u can start from it.

---
WBR,
Michael Nemtsev
blog: http://spaces.msn.com/members/laflour

"At times one remains faithful to a cause only because its opponents do not
cease to be insipid. (c) Friedrich Nietzsche


Lelic
9/15/2005 12:03:03 PM
While protecting the data is a very good suggestion, I would like to find out
how I can protect my server. This will be win app that will access a remote
server, which in turn has a direct access to database. My concern is that
somebody can get to the database through the interfaces of the server
component.

[quoted text, click to view]
Michael Nemtsev
9/16/2005 12:48:18 AM
Hello Lelic,

L> While protecting the data is a very good suggestion, I would like to
L> find out how I can protect my server. This will be win app that will
L> access a remote server, which in turn has a direct access to
L> database. My concern is that somebody can get to the database through
L> the interfaces of the server component.

Make your connection to the interfaces protected, use Security, deny anonymouse
access and some other stuff
One example is to use Web-services and WS-E

---
WBR,
Michael Nemtsev :: blog: http://spaces.msn.com/members/laflour
"At times one remains faithful to a cause only because its opponents do not
cease to be insipid. (c) Friedrich Nietzsche"

AddThis Social Bookmark Button